JPH10212848A - Key management device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a key-management device which is used under management of a plurality of persons or generally two users. SOLUTION: After a person using this key-management device has been specified by a user-specifying means, a holding means 5 containing individually a number of keys and restricting or allowing the taking-out of the keys contained independently, a designating means 10 for a key to be taken out, and a specifying means of a user, when a key to be taken out is designated by the designating means 10, the key can be taken out by the holding means 5. A controller 13 is provided to control the management device in such a way that when two or more persons are specified as the users by the user-specifying means regarding at least some of many keys held by the holding means 5, some of keys can be barely taken out.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a key management device, and more particularly to a key management device used under the control of a plurality of users, usually two users.

[0002]

2. Description of the Related Art Conventionally, as shown in Japanese Utility Model Publication No. Hei 6-26702, a management device has been developed which restricts keys used in various places so that only authorized users can use the keys. I have. In the management device disclosed in this publication, when a magnetic card owned by a valid user is read into the management device, the recorded content recorded on the magnetic card is read, and the content corresponding to the content is read. The lock mechanism of the key is automatically released,
As a result, only the key to which the user has been given a right to use in advance can be extracted. On the other hand, for a key to which the right to use has not been given, the lock mechanism is not released, so that useless use can be prevented.

[0003]

In the case of using a key, it is necessary to use the key for the first time under the control of a plurality of users, generally two users. For example, in a financial institution such as a bank, there is a key that can be controlled by a single user to set an automated device in a store to a usable state, and a key such as entering a vault or the like. Some keys need to require simultaneous entry by more than one user. However, in the conventional key management device, it is not assumed that the key is managed by two or more users. I had to rely on it.

[0004] The present invention has been made in view of the above circumstances, and has as its object to provide a key management device used under the management of a plurality of users, generally two users.

[0005]

SUMMARY OF THE INVENTION The object of the present invention is as follows.
User identification means for identifying a person who uses the key management apparatus; holding means for individually storing a large number of keys, and individually or releasably storing the stored keys so as to be regulated or permitted; After the user who uses the key management device is specified by the specifying means for specifying the key to be specified and the user specifying means, when the key to be extracted is specified by the specifying means, In the key management device, wherein the stored key can be taken out by the holding means, further, at least a part of the large number of keys held by the holding means, two or more persons by the user specifying means. This is achieved by a key management device having control means for controlling so that the partial key can be extracted for the first time when the user is specified as a user. According to the present invention, at least a part of the large number of keys held by the holding unit is specified by the user specifying unit as a person who uses two or more persons.
Since the control means makes it possible for the first time to extract some of the keys, automation of management of keys used under the control of two or more users can be achieved.

According to a preferred embodiment of the present invention, by further selecting a predetermined setting mode and designating a specific key by the designating means, the designated key is duplicated by the user identifying means. There is a setting unit that is registered in the memory as a key that can be taken out only when a plurality of persons or more are specified as users. According to a preferred embodiment of the present invention, further, a predetermined registration mode is selected, one or more other users are specified for one user by the user specifying means, and a specific mode is specified by the specifying means. Registration means for registering the specified key in the memory as a key which can be taken out only when the specified key is specified as a user who uses two or more persons by the user specifying means by specifying the key have.

According to a preferred embodiment of the present invention, when the predetermined registration mode is selected and one or more other users are specified for one user by the user specifying means, the specifying means is used. Prior to the specification of the key by any of the keys, a key that is registered in the memory in advance as a key that can be removed only when two or more persons are specified by the user specifying unit as a person who uses the key is specified by any one of the keys. It has a notifying means for notifying whether or not there is. According to a preferred embodiment of the present invention, furthermore, a predetermined registration mode is selected, one user is specified by the user specifying means, and a specific key is specified by the specifying means. Key is a key that is previously registered in a memory as a key that can be removed only when two or more persons are specified as users using the user specifying unit, and the key specified by the specifying unit Has an alarm means for notifying that the designation is illegal. According to a preferred embodiment of the present invention, there is further provided a recording means for recording, for each extracted key, one or more users specified at the time of extraction and the date and time of the extraction.

[0008]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the present invention will be described below in detail with reference to the accompanying drawings. FIG. 1 is a schematic external view of a key management device according to the present invention.
On the upper surface of the main body 1, from the right, an operation unit 2 including a numeric keypad for inputting a password and the like, a display unit 3 for displaying date and time, operation status, guidance, and the like. A card reader 4 for inserting a given card and reading information recorded on the card is provided. Below these, a key panel 6 composed of a number of key holder portions 5 is formed, and a printer 7 is disposed inside the right side thereof.

A plurality of key holder portions 5 each hold a key holder mounting hole 8 formed in the main body 1 and one of various keys, and are individually key holders that can be mounted only in the corresponding key holder mounting hole 8. 9, a holder button 10 that is operated when the key holder 9 is taken out, a holder lamp 11 that lights up, blinks or goes out according to circumstances,
Usually, when the key holder 9 is mounted in the key holder mounting hole 8, a lock mechanism (not shown) that locks the key holder 9 so that the key holder 9 cannot be taken out from the key holder mounting hole 8, and the key holder 9 is locked through the key holder mounting hole 8. It is constituted by a solenoid 12 (see FIG. 2) capable of releasing a lock state by a lock mechanism (not shown) so that the lock state can be taken out. In the illustrated apparatus, the key holder 5 is provided at 30 places.

FIG. 2 is a control block diagram according to the present invention. The operation unit 2, the display unit 3, the card reader 4, the key panel 6 including a number of key holder units 5, and the printer 7 are connected to a control unit 13, and a memory 14 is further connected to the control unit 13. I have. Each of these components is connected to a commercial power supply 16 via a control unit 13 and a power supply unit 15.
Are connected. Also, for example, a communication connector 17 is provided so that data in the memory 14 can be extracted to the outside as needed.

The functions achieved by these configurations will be described below with reference to the flowcharts in FIG. First, the flowchart shown in FIG. 3 shows that any one of the key holders 5,
That is, it is a flowchart showing a double card key setting mode for setting whether a key can be taken out under the control of one user or can be taken out under the management of two or more users. Here, in the following description, a key that can be taken out under the control of one user is called a single card key, and a key that can be taken out under the management of two or more users is called a double card key. Hereinafter, description will be given in accordance with each step (in the figure, denoted by S1, S2,...).

Step 1: The double card key setting mode is selected by operating the operation unit 2 and / or the card reader 4 in advance. Step 2: As shown in FIG. 4, the holder lamp 11 corresponding to the number of the holder button 10 registered in a predetermined area of the memory 14 as a double card key is turned on, and a single card key is displayed in a predetermined area of the memory 14 as a single card key. The holder lamp 11 corresponding to the registered number of the holder button 10 is not turned on. Step 3: It is monitored whether or not any of the 30 holder buttons 10 has been turned on. If the switch has been turned on, the process proceeds to step 4, and if not, the process proceeds to step 7. Step 4: Registered data in the memory 14 corresponding to the number of the holder button 10 that has been turned on is read out, and if the registered data is data representing a single card key, the process proceeds to step 5, where the registered data is a double card key. In the case of the data representing, go to step 6.

Step 5: Holder button 1 turned on
When the registered data in the memory 14 corresponding to the number 0 is data representing a single card key, the data is rewritten and registered as data representing a double card key, and the process returns to step 2. Step 6: If the registered data in the memory 14 corresponding to the number of the holder button 10 that has been turned on is data representing a double card key, rewrite this data into data representing a single card key and register it, and return to step 2. . Step 7: It is determined whether a key for instructing the end of the double card key setting mode has been turned on or a key operation has been performed on the operation unit 2, and if the end has been instructed, the process proceeds to step 8. This double card key setting mode is terminated, and if termination is not instructed, the process returns to step 2. Step 8: The operation in the double card key setting mode ends.

Therefore, by proceeding with the operation according to these flow charts, it is possible to determine which key can be taken out of the 30 key holders 5 under the control of one user, or that two or more keys can be used. Can be set under the control of the person. That is, in an example registered in a predetermined area of the memory 14 shown in FIG. 4, the symbol S indicating a single card key is assigned to the keys of the holder buttons 10 whose numbers are 1 to 20, and the number of the holder buttons 10 is 21. Keys 30 to 30 indicate that a symbol W indicating a double card key is recorded.

As described above, when the setting of the single card key or the double card key for 30 keys is completed, next, for each user, which key is taken out under the control of each user It is determined whether the key can be obtained or can be taken out under the control of two or more users including the user and other users.

The flowchart shown in FIG. 5 is a flowchart showing a single card registration mode in which each user sets which key can be taken out under the control of each user. This flowchart shows a case where a new card is created.

Step 11: The single card key registration mode is selected by operating the operation unit 2 and / or the card reader 4 in advance. Step 12: Insert a new card to be given to a certain user into the card reader 4, read the card, and proceed to the next step. Step 13: Since this is a new card for which a password has not been set in advance, a new password is set by the operation unit 2 and the process proceeds to the next step. In the case of updating and registering a card for which a password has already been set, the password is input through the operation unit 2 and the process proceeds to the next step. Step 14: The card number for the new card is set by the operation unit 2, and the process proceeds to the next step. In the case of renewal registration, the already set card number is read out and displayed on the display unit 3 and is displayed on the operation unit 2.
And the process proceeds to the next step.

Step 15: It is monitored whether or not any one of the 30 holder buttons 10 is turned on. If it is turned on, the process proceeds to step 16; if not, the process proceeds to step 19. Step 16: Registered data in the memory 14 corresponding to the number of the holder button 10 which is turned on is read out. If the registered data is data representing a single card key, the process proceeds to step 17, where the registered data is a double card key. In the case of the data representing, go to step 18. Step 17:
If the registered data in the memory 14 corresponding to the number of the holder button 10 that is turned on is data representing a single card key, this card alone (single), that is, under the management of one person using this card The number of the holder button 10 is stored in the memory 1
4 and return to step 15.

Step 18: If the registered data in the memory 14 corresponding to the number of the holder button 10 turned on is data representing a double card key, this card is used (single), that is, this card is used. Since the key is not a key that can be taken out under the control of the individual, a message to that effect is displayed on the display unit 3 and / or an alarm is issued using alarm means (not shown) such as a buzzer, and the like.
Return to Step 19: Check whether the key for instructing the end of the single card key registration mode is turned on in the operation unit 2
Alternatively, it is determined whether or not a key operation has been performed, and if termination is instructed, the process proceeds to step 20 to terminate the single card key registration mode. If termination is not instructed, the process returns to step 12. Step 20: End the operation of the single card key registration mode.

Therefore, by proceeding with the operation according to these flows, it is possible to set for each user which key can be taken out under the control of that user. That is, in an example registered in a predetermined area of the memory 14 shown in FIG.
As for the cards of “〜” to “003”, the numbers of the holder buttons 10 of the keys that can be taken out with only one of the cards are “1” to “10”, and similarly, the card number “031” The number of the holder button 10 is “1” to “15”,
For the card with the card number “050”, the numbers of the holder buttons 10 are “1” to “20”.

As described above, when the single card registration for setting which key can be taken out under the control of each user for each user is completed, next, the use of each user is completed. For each user, which key can be taken out under the control of two or more users, the user and other users, is set.

The flowchart shown in FIG. 6 is a double card registration for setting, for each user, which key can be taken out under the control of two or more of the user and other users. It is a flowchart which shows a mode.

Step 21: The double card key registration mode is selected by operating the operation unit 2 and / or the card reader 4 in advance. Step 22: Insert the card of one user to be registered into the card reader 4, read the card, and proceed to the next step. Step 23: For one user to be registered, insert the card of the first other user to be paired into the card reader 4, read the card, and proceed to the next step. Step 24: For one user to be registered, insert the card of the second other user to be paired into the card reader 4, read the card, and proceed to the next step. Step 25: For one user to be registered, insert the card of the third other user to be paired into the card reader 4, read the card, and proceed to the next step. Note that reading of the cards of the second and third other users (expressed as the first substitute card and the second substitute card in FIG. 6) in steps 24 and 25 is not necessarily essential. , And the process may proceed from step 23 to step 26 immediately.

Step 26: When at least one user is specified for one user by inserting and reading the card into the card reader 4, the double card shown in FIG. The holder lamp 11 corresponding to the number of the holder button 10 registered as a double card key based on the contents recorded in a predetermined area of the memory 14 as shown in FIG.
Blinks to easily inform which key is a double card key. Step 27: Corresponding to the blinking holder lamp 11, that is, in the case of this embodiment, as shown in the contents of the memory 14 in FIG. 4, the numbers "21" to "30" of the holder button 10 set as the double card key. It is monitored whether or not any of the ten holder buttons 10 of “10” is turned on.
If not, the process proceeds to step 29.

Step 28: The combination of one user and one or more other users who has already specified the number of the holder button 10 that has been turned on is registered in the memory 14, and the process returns to step 27. In this case, the blinking holder lamp 11 is switched to the lighting state so that the registration is clearly recognized. Step 29: It is determined whether or not a key for instructing termination of the double card key registration mode has been turned on or a key operation has been performed on the operation unit 2, and if termination has been instructed, the process proceeds to step 20. This double card key registration mode is terminated, and if termination is not instructed, the process returns to step 27. Step 30: end the operation of the double card key registration mode.

Therefore, by proceeding with the operation according to these flows, it is possible to determine for each user which key can be taken out under the control of two or more of the user and other users. It can be set. That is,
In an example registered in a predetermined area of the memory 14 shown in FIG. 7, the card numbers "001" to "003" have card numbers "031" to "033" as other users to be paired. The number of the key holder button 10 of the key that can be taken out when these two or more users are specified is specified as “21” to “25”, and similarly, the card number "03
With respect to the cards of "1" to "033", the card numbers "001" to "003" are specified as other users to be paired, and can be taken out when two or more of these users are specified. The number of the key holder button 10 is “21” to “25”, and for the card with the card number “050”, the card numbers “041” to “042” are specified as other users to be paired. And the number of the key holder button 10 which can be taken out when these two or more users are specified is "2".
1 "to" 30 ".

As described above, for each user, it is set which key can be taken out under the control of two or more of the user and other users.

The flowchart shown in FIG. 8 is a flowchart for controlling a key extracting process based on the contents set and registered as described above. Step 51: Normally, by operating the main switch of the key management device to supply power, the extraction processing mode is selected. Step 52: When a card given to a certain user is inserted into the card reader 4 and the card is read, the process proceeds to the next step. Step 53: Enter the PIN of the card that has been read
The process proceeds to the next step on condition that the information is input and confirmed by the operation unit 2. Step 54: Following the first card, it is determined whether or not the second card is inserted into the card reader 4 and read. If the second card has not been read, the process proceeds to step 55. If the second card is read, the process proceeds to step 59.

Step 55: When only one card has been read, the memory 14 corresponding to the card number read by the card reader 4 is searched, and the card 14 can be taken out with only one card. The number data of the holder button 10 which can be taken out under the management of the above is read out from the memory 14 and the corresponding holder lamp 11 is blinked. That is, when the read card number is “001” as shown in FIG.
Number 1 corresponding to "1" to "10"
1 flashes. Step 56: It is monitored whether or not any of the holder buttons 10 corresponding to the blinking holder lamp 11 has been turned on. If the switch has been turned on, the process proceeds to step 57; Proceed to 58.

Step 57: The solenoid 12 corresponding to the holder button 10 which has been turned on is driven to release the locked state by a lock mechanism (not shown), so that the key holder 9 can be taken out from the key holder mounting hole 8.
Furthermore, for each number of the holder button 10 that is turned on,
Data indicating the card number of the card read at the time of extraction and the extraction date and time are recorded in the memory 14.
The recording data is printed by the printer 7 as necessary. Further, the holder lamp 11 corresponding to the holder button 10 that has been turned on is switched from blinking to lighting, and the process proceeds to the next step. Step 58: In the operation unit 2, a key for instructing the end of the removal processing mode is turned on, or
It is determined whether or not a key operation has been performed. If termination has been instructed, the flow proceeds to step 64 to end this takeout processing mode, and if termination has not been instructed, the flow returns to step.

Step 59: When the second card is read, the personal identification number of the second card read is input by the operation unit 2 and the next Proceed to step. In this case, since the two cards have been read, the memory 14 corresponding to the first card number read by the card reader 4 is searched, and
It is checked whether the double card key can be taken out by combining the first card with the first card, that is, a combination card that can be taken out under the control of two or more users. That is, the read 1
When the second card number is “001” as shown in FIG. 7, the read second card number is “031” to
It is confirmed whether it is "033". Then, after the above confirmation is made, the process proceeds to the next step.

Step 60: When the two cards are read and the combination of the first card and the second card is confirmed, the corresponding memory 14 is searched and the combination of these cards can be taken out. That is, a holder button 1 that can be taken out under the control of two or more users.
The number data of 0 is read from the memory 14 and the corresponding holder lamp 11 is made to blink. That is, as shown in FIG. 7, the first card number read is “001”.
When the second card number is "031", the holder lamp 11 corresponding to the number of the holder button 10 corresponding to "21" to "25" blinks. In this case, in the step 55, the holder lamp 11 corresponding to the number of the holder button 10 blinked at the stage when the first card is read is controlled to stop blinking and to be turned off. Holder button 1 corresponding to card key
0 can be correctly reported. Step 61: It is monitored whether or not any one of the holder buttons 10 corresponding to the blinking holder lamp 11 has been turned on. If the switch has been turned on, the process proceeds to step 62; otherwise, the process proceeds to step 63. move on.

Step 62: The solenoid 12 corresponding to the holder button 10 that has been turned on is driven to release the locked state by a lock mechanism (not shown), so that the key holder 9 can be taken out from the key holder mounting hole 8.
Furthermore, for each number of the holder button 10 that is turned on,
Data indicating the card numbers of the two cards read at the time of extraction and the date and time of the extraction are recorded in the memory 14. The recording data is printed by the printer 7 as necessary. Further, the holder lamp 11 corresponding to the holder button 10 that has been turned on is switched from blinking to lighting, and the process proceeds to the next step. Step 63: In the operation unit 2, a key for instructing termination of the removal processing mode is turned on, or
It is determined whether or not a key operation has been performed. If termination has been instructed, the flow proceeds to step 64 to end this takeout processing mode, and if termination has not been instructed, the flow returns to step 61. Step 64: The operation in the take-out processing mode ends.

Thus, by performing operations in accordance with these flows, each user can use a card given to each user in advance, and obtain keys required for work from the key management device. For keys that can be taken out and used, and that are registered in advance as important keys, as keys that can be taken out for one user under the management of two or more people with other users, Only by using a card previously given to each of the user and another predetermined user, an important key required for business can be taken out from the key management device and used.

As described above, in the present embodiment, the card reader 4 and the operation unit 2 constitute a user specifying means as claimed. Further, in the present embodiment, a plurality of key holder portions 5 formed on the key panel 6, the solenoid 12, and a lock mechanism (not shown) constitute a holding means as claimed in the claims. Further, in the present embodiment, the designating means shown in the claims is constituted by the holder buttons 10 provided on each of the key holder portions 5. Further, in the present embodiment, the control unit 13 constitutes a control unit described in claims. Further, in the present embodiment, the control section 13 also constitutes a setting means shown in claims. Furthermore, in the present embodiment, the control unit 13 also constitutes a registration unit described in claims. Further, in the present embodiment, the notifying means shown in the claims is constituted by the holder lamps 11 provided on each of the many key holder portions 5. Further, in the present embodiment, the printer 7 and / or the memory 14 constitute recording means as set forth in the claims.

The present invention is not limited to the above-described embodiments, but can be achieved by other structural means. For example, in the present embodiment, the card reader 4 and the operation unit 2 constitute a user identification unit. However, the card reader 4 is not used, and the operation unit 2 uses the ID number of each user,
This can also be achieved by inputting a password after inputting a name and the like. Further, in this embodiment,
The designating means is constituted by the holder buttons 10 provided on each of the many key holder units 5, but the holder unit 10 is not provided, and the key holder unit 5 is operated by the operation unit 2.
This can also be achieved by inputting the number.

[0037]

As described above in detail, according to the key management device of the present invention, at least a part of the large number of keys held by the holding means is determined by the user specifying means by two or more persons. When a person is identified as a person using it,
Since the control means makes it possible for the first time to extract some of the keys, automation of management of keys used under the control of two or more users can be achieved. Further, when a predetermined setting mode is selected and a specific key is specified by the specifying means, the specified key is specified as a person who uses two or more persons by the user specifying means. Can be registered in the memory as a key that can be taken out for the first time. Further, by selecting a predetermined registration mode, specifying one or more other users for one user by the user specifying means, and specifying a specific key by the specifying means, The key can be registered in the memory as a key that can be extracted only when the user specifying unit specifies two or more persons as users.

[0038] Further, when a predetermined registration mode is selected and one or more other users are specified for one user by the user specifying means, the key is specified by the specifying means. It is possible to report which key is previously registered in the memory as a key that can be taken out only when two or more persons are specified as users who use the user by the user specifying means. further,
A predetermined registration mode is selected, one user is specified by the user specifying means, and a specific key is specified by the specifying means, so that the specified key becomes two persons by the user specifying means. When a key that is registered in the memory in advance as a key that can be taken out for the first time when a plurality of persons are specified as a user is notified that the specification of the key by the specifying unit is illegal. it can. Further, for each extracted key, one or more users specified at the time of extraction and the date and time of extraction can be recorded.

[Brief description of the drawings]

FIG. 1 is a schematic external view of a key management device according to an embodiment of the present invention.

FIG. 2 is a control block diagram of a key management device according to an embodiment of the present invention.

FIG. 3 is a flowchart showing a double card key setting mode in the key management device according to one embodiment of the present invention.

FIG. 4 is a diagram showing an example registered in a predetermined area of a memory 14 in a key management device according to an embodiment of the present invention. Each key of a key holder unit is a single card key or a double card key. This shows a state in which whether or not there is any is recorded.

FIG. 5 is a flowchart showing a single card registration mode in the key management device according to one embodiment of the present invention.

FIG. 6 is a flowchart showing a double card registration mode in the key management device according to one embodiment of the present invention.

FIG. 7 is a diagram showing an example registered in a predetermined area of the memory 14 in the key management device according to one embodiment of the present invention. The registration status and the registration status of the double-handled card number and the holder button number of the key holder portion in the case of the combination are shown.

FIG. 8 is a flowchart for controlling a key extraction process in the key management device according to one embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Main body 2 Operation part 3 Display part 4 Card reader 5 Key holder part 6 Key panel 7 Printer 8 Key holder mounting hole 9 Key holder 10 Holder button 11 Holder lamp 12 Solenoid 13 Control part 14 Memory 15 Power supply part 16 Commercial power supply 17 Communication connector

Claims (6)

[Claims] 1. A user specifying means for specifying a person who uses the present key management device, a plurality of keys are individually stored, and the removal of the stored keys is held so as to be regulated or permitted. Holding means, designating means for designating a key to be taken out, and after the user identifying means has identified the person who uses the key management device, the designation means designates the key to be taken out. And a key management device that allows the stored key to be taken out by the key holding unit. Further, at least a part of a large number of keys held by the holding unit is further controlled by the user specifying unit. A key management device, comprising: a control unit that controls a key to be extracted for the first time when a plurality of persons are specified as persons who use the key. Further, by selecting a predetermined setting mode and designating a specific key by the designating means, the designated key uses two or more persons by the user specifying means. 2. The key management device according to claim 1, further comprising a setting unit that is registered in the memory as a key that can be extracted only when the user is specified. 3. A method for selecting a predetermined registration mode, specifying one or more other users for one user by the user specifying means, and specifying a specific key by the specifying means. According to the present invention, the designated key is registered in the memory as a key which can be taken out only when the specified user is specified as a person who uses two or more persons by the user specifying means. 3. The key management device according to claim 1, wherein: 4. When the predetermined registration mode is selected and one or more other users are specified for one user by the user specifying means, prior to specifying a key by the specifying means, A notifying means for notifying which key is a key registered in advance in the memory as a key which can be taken out only when two or more persons are specified as a user using the user specifying means. The key management device according to claim 3, wherein the key management device has a key management device. Further, by selecting a predetermined registration mode, specifying one user by the user specifying means, and specifying a specific key by the specifying means, the specified key is When a key that is previously registered in a memory as a key that can be taken out only when two or more persons are specified as a person who uses two or more persons by a user specifying unit, specification of the key by the specifying unit is illegal. The key management device according to any one of claims 1 to 4, further comprising an alarm unit for notifying that there is an event. 6. The apparatus according to claim 1, further comprising recording means for recording at least one user identified at the time of removal and a removal date and time for each extracted key. 2. The key management device according to claim 1.